Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File:                     js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier:          lb8N3eWXG7O3BwYaqa9jHUaoTovG7M058nkr1S+SACk=
Subject key identifier:   D8:5C:A6:48:2A:DD:1F:E6:37:1F:96:16:53:8C:CF:71:A6:16:DE:75
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number:          01E3
Signing time:             Sun 19 May 2024 04:18:19 +0000
Manifest this update:     Sun 19 May 2024 04:18:18 +0000
Manifest next update:     Sun 26 May 2024 04:18:18 +0000
Files and hashes:         1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: v8vXZepipOqNMvwlq415eoT4UibjVc0NLyB/Wi8smCE=)
                          2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: OTBXlavFZoqhxjioFt1AtPUxfcy6YzBVmb/Q2Pqzka8=)
                          3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: VbLa8+G2Kak4BsqZL0KLsN32nzloEodUrCMl/tmFbzw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
                          rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: May 19 04:18:18 2024 GMT
            Not After : May 26 04:18:18 2024 GMT
        Subject: CN=66497d8a-77ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:5c:cb:4c:42:7c:86:d3:4f:1f:a7:ff:df:
                    7d:20:7e:c3:62:98:31:f6:39:96:3f:5f:35:f3:2c:
                    77:46:a0:31:bc:84:4a:f0:d0:da:af:de:03:57:59:
                    46:bb:97:d6:51:a1:84:de:a7:a9:cc:a3:34:a6:4c:
                    c3:2d:ae:c8:ef:24:de:26:96:bd:e1:6e:9d:5c:4b:
                    23:39:5f:18:45:13:b9:e9:20:d4:31:2b:05:55:c3:
                    f9:26:6a:a5:fc:67:97:99:52:6c:cd:a8:1c:95:47:
                    17:1a:5b:8e:fd:04:de:b0:07:7c:ff:44:38:f3:a2:
                    6c:6b:ad:07:d6:a4:88:85:57:0b:02:44:f2:d6:72:
                    6c:b1:bc:4a:03:02:ad:45:11:17:db:82:60:7c:20:
                    7b:86:53:8c:72:66:95:23:0d:f8:2b:b3:72:3c:fb:
                    96:09:1c:82:c4:b1:22:9f:43:26:4c:a8:8e:3a:e4:
                    f4:6d:22:36:b9:52:10:88:fb:55:8f:ce:19:6d:b0:
                    3b:b8:2b:b5:6d:0d:94:45:d9:18:09:5c:d9:bc:8d:
                    4e:46:56:6c:4c:99:71:08:e9:3c:21:cc:cf:4d:93:
                    62:e9:e3:5f:04:35:3d:ee:68:22:20:79:f1:fd:c0:
                    42:cc:e7:3a:93:aa:cb:53:1a:b9:2a:23:d0:79:16:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:A6:48:2A:DD:1F:E6:37:1F:96:16:53:8C:CF:71:A6:16:DE:75
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:28:c1:ca:e4:d5:f5:da:a3:d6:1d:5e:4a:cb:19:31:08:b5:
         cd:0c:1f:84:9a:67:15:cf:04:6a:89:39:ed:8e:e6:1f:14:80:
         89:0f:d1:2d:47:9a:01:6e:87:46:76:a7:91:d2:a8:6c:db:b0:
         02:63:fb:87:9c:8f:d2:82:39:0f:55:b9:c8:a7:12:6d:0f:63:
         1c:30:95:c2:46:f6:62:8c:43:55:0d:ca:93:5c:9d:0a:4e:14:
         b5:b4:08:2a:3e:6a:78:f2:67:57:7c:57:e5:48:58:b9:53:a1:
         2f:a6:6a:ff:e0:49:ab:bc:76:bd:ee:b7:ca:15:1a:74:a7:a3:
         00:33:a5:3e:c9:76:14:96:90:fc:73:2c:b3:02:77:94:85:15:
         54:cd:f8:92:a8:b5:98:e4:3c:8b:76:90:d0:c8:e0:90:0d:24:
         a1:77:38:85:73:3f:0d:aa:2d:86:9c:fd:e8:c1:e1:55:97:3c:
         53:78:eb:4a:68:d4:c7:96:a7:7a:9d:8c:ee:01:3c:22:b5:c5:
         85:5f:90:bf:7e:21:77:97:20:60:6b:c4:bd:97:b6:69:c1:bc:
         88:5b:39:06:e0:e7:22:60:3f:0d:d6:3c:0e:48:f9:3a:e2:69:
         9c:d7:f7:99:0a:92:2f:e5:49:13:22:c6:6c:6e:f2:f2:8b:7e:
         93:e8:40:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD
QzFCRTFDMzgwHhcNMjQwNTE5MDQxODE4WhcNMjQwNTI2MDQxODE4WjAYMRYwFAYD
VQQDEw02NjQ5N2Q4YS03N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Ttcy0xCfIbTTx+n/999IH7DYpgx9jmWP1818yx3RqAxvIRK8NDar94DV1lG
u5fWUaGE3qepzKM0pkzDLa7I7yTeJpa94W6dXEsjOV8YRRO56SDUMSsFVcP5Jmql
/GeXmVJszagclUcXGluO/QTesAd8/0Q486Jsa60H1qSIhVcLAkTy1nJssbxKAwKt
RREX24JgfCB7hlOMcmaVIw34K7NyPPuWCRyCxLEin0MmTKiOOuT0bSI2uVIQiPtV
j84ZbbA7uCu1bQ2URdkYCVzZvI1ORlZsTJlxCOk8IczPTZNi6eNfBDU97mgiIHnx
/cBCzOc6k6rLUxq5KiPQeRZpvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhcpkgq
3R/mNx+WFlOMz3GmFt51MB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF
QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj
MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4KMHK5NX12qPWHV5KyxkxCLXNDB+EmmcVzwRqiTntjuYfFICJD9Et
R5oBbodGdqeR0qhs27ACY/uHnI/SgjkPVbnIpxJtD2McMJXCRvZijENVDcqTXJ0K
ThS1tAgqPmp48mdXfFflSFi5U6Evpmr/4EmrvHa97rfKFRp0p6MAM6U+yXYUlpD8
cyyzAneUhRVUzfiSqLWY5DyLdpDQyOCQDSShdziFcz8Nqi2GnP3oweFVlzxTeOtK
aNTHlqd6nYzuATwitcWFX5C/fiF3lyBga8S9l7ZpwbyIWzkG4OciYD8N1jwOSPk6
4mmc1/eZCpIv5UkTIsZsbvLyi36T6ECc
-----END CERTIFICATE-----
Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org